Brand ClaimErleben, was verbindet

Information on the use of cookies

This website uses only the technically necessary cookies to provide you with the best possible service.
Your session is identified by a so-called session cookie in order to maintain your language choice and to allow a comfortable form use. Furthermore, a login is only possible by using a cookie.
Further information can be found in the data protection information.

Accept

Advisory 2022-0728 - Microsoft Office: Multiple Vulnerabilities

Notice: You can now also find information from the Vulnerability Advisory Service in the CTI portal!
The CTI portal is available at the following address: https://cti-portal.telekom.net/advisories/2022-0728

Date

2022-04-13

State

2022-04-13

Risk*

Damage: MEDIUM-HIGH
Attack Probability: LOW

Attack

A remote authenticated or anonymous attacker can exploit multiple vulnerabilities in Microsoft 365 Apps, Microsoft Excel 2013, Microsoft Excel 2016, Microsoft Office, Microsoft Office 2013, Microsoft Office 2013 RT, Microsoft Office 2016, Microsoft Office 2019, Microsoft Office 2019 for Mac, Microsoft Office Online Server, Microsoft Office Web Apps Server 2013, Microsoft SharePoint, Microsoft SharePoint Foundation 2013, Microsoft SharePoint Server 2016, Microsoft SharePoint Server 2019 and Microsoft Skype in order to execute arbitrary code, to disclose sensitive information and to manipulate presented information.

Notice: Further details on this vulnerability advisory is available to registered customers after having logged in or via our daily advisory email.

* The probability of an attack is determined by the attacker's motivation, the necessary expend and the possibilities for an attack. The damage probability is determined by the expend needed to resolute the attack and probable indirecte consequences of an attack for business processes. Telekom Security assumes worst case scenarios.

Copyright © 1999-2026 Deutsche Telekom Security GmbH. All rights reserved. Reproduction and distribution of this publication in any form - even in parts - without prior written permission is forbidden.

The information contained herein has been obtained from sources believed to be reliable and trusted or have been verified. Telekom Security can take liability for completeness, accuracy and correctness only in so far, as gross negligence or intention create liability. Any liability beyond it, in particular possible damages resulting from using or non-usability of the information contained herein, is excluded.